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TITLE OF THE INVENTION 

GROUP-BROWSING SYSTEM 

CROSS-REFERENCE TO RELATED APPLICATIONS 
This application is related to and claims priority to U.S. Provisional Patent 
Application Serial No. 60/180,589, filed February 7, 2000. The contents of that application 
are incorporated herein by reference. 

BACKGROU ND OF THE. INVENTION 

Field of t he Invention 

The present invention generally relates to an internet group-browsing system that 
allows multiple users to interact with web pages together. 

Discussion of the BaclcprmmH 

Internet users typically use a web-browser to "surf the Internet. A browser is a 
special-purpose application program that effects requests of web pages and the display of a 
requested web page. It allows users to surf the Internet by moving from one World Wide 
Web (WWW) site to another. Information on providing Web services is provided in the 
following references which are incorporated herein by reference: (1) Visual Studio Core 
Reference Set, by Microsoft Press, (2) Visual InterDev 6.0: Web Technologies Reference, by 
Microsoft Press, (3) Professional Active Server Pages 2.0 by Francis et al., published by 
WROX Press Ltd., (4) Oracle PL/SQL Programming by Scott Urman, Published: March 
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1996, (5) Hitchhikers Guide to Visual Basic and SQL Server: with CD-ROM, by William 
Vaughn, Published: May 1997, (6) Using Microsoft SQL Server 6.5 (Special Edition) by 
Stephen Wynkoop, Published: March 1997, and (7) Advanced PowerBuilder 6 Techniques by 
Ramesh Chandak. 

Each individual who is web-browsing typically interacts individually with a given 
web site. Therefore, when one individual is web-browsing, other Internet users at remote 
locations are unable to have the same experience or see what that individual is doing on a 
requested web site. For example, a person who is shopping on-line via a company's web site 
is unable to have a remotely located friend shop with him/her. 

Web group-browsing allows multiple users to "surf" the Internet together and to 
experience the same web sites simultaneously by enabling those individuals to scroll through 
a web site's pages together. For example, two people at remote locations can now shop for 
clothes together on a company's web site. The shopping experience, however, bears little 
resemblance to a real world group shopping experience due to several existing technological 
limitations (e.g., privacy, personalization, and the inability of clients group-browsing together 
to communicate with each other). 

Some web sites enable users to "personalize" or customize web pages on the site by 
(1) indicating preferences or (2) entering personal information. As a result, such users may 
be provided with personalized services (e.g., "one click shopping" shopping service currently 
provided by Amazon.com). 

One implementation technique for personalization utilizes cookies. Cookies reside on 
each user's local computer to be used as personal identifiers sent together with a Uniform 
Resource Locator (URL) requests. To view a specific web page, a client computer system 



specifies the URL for that web page in a request. This request is forwarded to the web server 
that supports that web page. When that web server receives the request, it sends that web 
page to the client computer system. When the client computer system receives that web page, 
it typically displays the web page using a browser. Cookies can be classified as "persistent 
cookies," which are stored on users' hard drives, and "session cookies," which are stored in 
the memory and are only valid during a particular browsing session. Since cookies enable 
web sites to display personalized information (e.g., personal preferences, names, addresses, 
telephone numbers, credit card numbers), it is highly undesirable to allow one user's cookies 
to be accessed by another user without authorization. As such, personalization impacts 
privacy. 

Different approaches have been taken to deal with personalization and privacy issues. 
The first approach is to confine all users to group-browse within one or a few sites that 
integrate group-browsing services, which address all personalization and privacy issues 
specific to those sites. However, because the group-browsing experience is limited to a few 
selected and customized sites, this approach is not a generalized service for sharing 
web-surfing experiences. As such, known group-browsing systems are specific to the web 
site visited and, as such, users have different group-browsing experiences at different web 
sites. 

The second approach is to prevent users from sharing form data that is sent in a POST 
command. This approach has been used by Cahoots and SideTalk who designed web tour 
services. Such POST data is exists in some personalized web pages requiring login or 
automatic login. Thus, the second approach unduly limits group-browsing because it does 



not allow group-browsers to access pages/requiring POST data. Furthermore, such services 
limit group-browsing to a single "in-control" party, decreasing the sense of a shared activity. 

The third approach is to place the burden of privacy on the users. If one of the users 
logs into his or her personalized web page during a group-browsing session, this user will 
receive a cookie from the web site. This personal cookie will be shared by all users in the 
same session because they will submit the same URL requests to the web site. The user may 
not, however, be aware that his personal cookie is being shared. There are two primary 
shortcomings to this approach. First, the shared cookie becomes a persistent cookie on 
someone else's computer, allowing other users to access and use the cookie owner's personal 
information. Second, the personal persistent cookies of other users in the session may be 
replaced without acknowledgment. With replaced cookies, users will not enjoy the same 
personalized pages they expected even if they are not in group-browsing sessions. 

SUMMARY OF THE INVENTION 

Accordingly, one object of the present invention is to allow clients to group-browse 
without confining the users to sites that integrate group-browsing services. 

It is a further object of the present invention to allow group-browsing clients to share 
personalized web pages without sharing any confidential information. 

It is another object of the present invention to allow group-browsing clients to share 
their personalized web pages without permanently leaving their personal cookies on other 
users' computers. 

It is a further object of the present invention to allow group-browsing clients to shop 
together, but also to make separate purchases. 



Each of the above objects is separate and need not be addressed by every embodiment 
described herein or every claim. Accordingly, pne embodiment addresses at least one of the 
above objectives by providing a group-browsing system that masks the identity of each client 
computer to prevent web sites from retrieving any client's actual identification information 
(e.g., in the form of a cookie) that is not part of a group browsing session. Nonetheless, the 
group browsing system may create a temporary identifier (e.g., temporary cookie) for use by 
each client in a group during a group browsing session so that when each such client logs on 
to a web site the same web page is displayed for all the clients in the group. At the end of a 
group-browsing session, the temporary identifiers are automatically discarded to prevent any 
user from returning to the web site while masquerading as another client. 

According to one embodiment, the actions of all the clients may be tracked 
collectively (e.g., for billing purposes). 

BRIEF DESCRIPTION OF THE DRAWINGS 
A more complete appreciation of the invention and many of the attendant advantages 
thereof will be readily obtained as the same becomes better understood by reference to the 
following detailed description when considered in connection with the accompanying 
drawings, wherein: 

Figure 1 is a schematic illustration of a computer for implementing either a client-side 
environment for a group-browsing session or a server-side environment for controlling a 
group-browsing session or its clients; 

Figure 2A is a screenshot of an exemplary interface for authenticating a user to a 
server-side environment for controlling a group-browsing session; 



Figure 2B is a schematic illustration of an authentication request by user B in 
preparation for a group-browsing session; 

Figure 2C is a schematic illustration of (1) an authentication reply to user B and (2) a 
notice to all other users that have registered an interest in knowing when user B has logged 
on; 

Figure 2D is a screenshot of an exemplary interface for creating or controlling a 
client-side environment for a group-browsing session after user authentication; 

Figure 3A is a screenshot of an exemplary dialog box for adding users to the interface 
of Figure 2 in response to selecting the add button on the interface of Figure 2; 

Figure 3B is a screenshot of an exemplary interface for searching for users in response 
to selecting the search button on the dialog box of Figure 3 A; 

Figures 4A and 4B are exemplary screenshots of the interface of Figure 2 after one 
and three users have been added, respectively; 

Figure 5 A is a screenshot of an exemplary dialog box for inviting one of the users 
listed in the interface of Figure 4B to join in a group-browsing session; 

Figure 5B is a screenshot of an exemplary dialog box for accepting the invitation of 
another user; 

Figure 5C is a schematic illustration of a first user requesting that a second user join a 
group-browsing session using a pure client-server model; 

Figure 5D is a schematic illustration of a first user requesting that a second user join a 
group-browsing session using a hybrid client-server/peer-to-peer model; 

Figure 5E is a schematic illustration of client-side environments having been spawned 
as a result of at least two users forming a group-browsing session; 



Figure 6 is a screenshot of an exemplary three part display that is generated after a 
user accepts an invitation to begin a group-browsing session; 

Figure 7 is a screenshot of an exemplary chat box in which a local user has received a 
message from a remote user after beginning a group-browsing session; 

Figure 8A is a schematic illustration of a request from user A that causes the display 
of users A and B to be updated; 

Figure 8B is a screenshot of a result of a request to have the group view a new page; 

Figure 9 is a screenshot of an exemplary warning dialog indicating that sensitive data 
should not be shared; 

Figure 1 0 is a screenshot of an exemplary dialog box indicating that a group-browsing 
= session is about to be ended; 

Figure 1 1 A is a screenshot of an exemplary dialog box indicating that group-browsing 
session has ended; 

Figure 1 1 B is an exemplary code excerpt showing how cookies are handled upon 
j termination of a group browsing session; 

Figure 12 is a screenshot of an exemplary dialog box for sending messages between 

users; 

Figures 13-16 are exemplary screenshot of configuration dialog boxes; 
Figure 17 is a screenshot of an exemplary warning dialog box; and 
Figure 18 is a flow diagram of a general operation of a method of the present 
invention. 



DETAILED DESCRIPTION OF THF, PREFERRED EMBODIMENT 
Referring now to the drawings, wherein like reference numerals designate identical or 
corresponding parts throughout the several views, Figure 1 is a schematic illustration of a 
computer system for implementing either a client-side environment for a group-browsing 
session or a server-side environment for controlling a group-browsing session or its clients. 
A computer 100 implements the method of the present invention, wherein the computer 
housing 102 houses a motherboard 104 which contains a CPU 106, memory 108 (e.g., 
DRAM, ROM, EPROM, EEPROM, SRAM, SDRAM, and Flash RAM), and other optional 
special purpose logic devices (e.g., ASICs) or configurable logic devices (e.g., GAL and 
reprogrammable FPGA). The computer 100 also includes plural input devices, (e.g., a 
keyboard 122 and mouse 124), and a display card 1 10 for controlling monitor 120. In 
addition, the computer system 100 further includes a floppy disk drive 1 14; other removable 
media devices (e.g., compact disc 119, tape, and removable magneto-optical media (not 
shown)); and a hard disk 1 12, or other fixed, high density media drives, connected using an 
appropriate device bus (e.g., a SCSI bus, an Enhanced IDE bus, or a Ultra DMA bus). Also 
connected to the same device bus or another device bus, the computer 100 may additionally 
include a compact disc reader 1 18, a compact disc reader/writer unit (not shown) or a 
compact disc jukebox (not shown). Although compact disc 1 19 is shown in a CD caddy, the 
compact disc 1 19 can be inserted directly into CD-ROM drives which do not require caddies. 
In addition, a printer (not shown) also provides printed listings of web sites visited in a group- 
browsing session. 

As stated above, the system includes at least one computer readable medium. 
Examples of computer readable media are compact discs 1 19, hard disks 1 12, floppy disks, 
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tape, magneto-optical disks, PROMs (EPROM, EEPROM, Flash EPROM), DRAM, SRAM, 
SDRAM, etc. Stored on any one or on a combination of computer readable media, the 
present invention includes software for controlling both the hardware of the computer 100 
and for enabling the computer 100 to interact with a human user. Such software may include, 
but is not limited to, device drivers, operating systems and user applications, such as 
development tools. Such computer readable media further includes the computer program 
product of the present invention for implementing either a client-side environment for a 
group-browsing session or a server-side environment for controlling a group-browsing 
session or its clients. The computer code devices of the present invention can be any 
interpreted or executable code mechanism, including but not limited to scripts, interpreters, 
dynamic link libraries, Java classes, and complete executable programs. Moreover, the 
computer code devices may be received (e.g., downloaded) dynamically across a Wide Area 
Network (e.g., the Internet) prior to execution or interpretation. The number of functions 
performed by any one computer code device is a matter of design choice in light of the 
teachings herein. For example, the proxy 70, the group browser 65, and the group browser 
controller 60 (discussed below) may implemented as one or more components in one or more 
applications. For example, the group browser controller 60 and the proxy 70 may simply be 
two threads of control within the same program or may be two separate programs. Likewise, 
the group browser controller 60 or the proxy 70 may be integrated into the group browser 65. 

Using at least one computer code device on a client-side computer, a user is prompted 
to authenticate himself/herself (e.g., using a dialog box as shown in Figure 2A). In one 
embodiment, a user sends a username and password to a coordination server 12 (discussed 
below), where the username and password are compared against entries accessible by the 



coordination server. Such entries may be stored in files, databases or other data repositories. 
In an alternate embodiment, tokens or time synchronized control words are utilized for 
authentication. 

As shown in Figure 2B, a single user (i.e., user A) has been authenticated to the 
coordination server 12. User A is currently browsing web pages in a non-shared mode since 
no other users have been authenticated. The non-shared browser has access to all permanent 
cookies maintained on the system as well as any session cookies generated within the session. 
Later, user B sends an authentication request to the coordination server 12. As shown in 
Figure 2C, if the authentication information is correct, then user B is sent the status of the 

- other users that he/ she has requested information on. Contemporaneously, any users that 
have registered an interest in user A's status a likewise notified. (As would be appreciated by 

- one of ordinary skill in the art, the status information may be pulled by remote users 
~ periodically rather than pushed.) 

Once user B has been authenticated to the coordination server 12, user B receives 

- back the status of selected group-browsing members. If user B has not requested information 
any other users, the list is initially empty. An exemplary interface 200 is shown in Figure 2D. 
That interface includes a title bar with a close button 202, a help button 205 and a 
minimization button 210. The interface 200 also includes a settings button 215, a mail button 
220, a group-browsing invitation button 225 and a user add button 230 for controlling the 
interface 200. The interface also includes a scrollable list area 240 for listing other users and 
the statuses. 

Since the user B cannot group-browse by himself, the user may select the user add 
button 230 to receive the user add dialog 250 shown in Figure 3A. The user may either enter 
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a known name in the text entry box, cancel the addition, or search for another user using a 
separate interface. One embodiment of the search interface is a web page as shown in Figure 
3B. Other search interfaces are also possible (e.g., image searches or voice searches). One 
such voice search utilizes a computer microphone to couple voice input to a voice recognition 
unit. The recognition unit may be local or remote (e.g., at the other end of an Internet 
telephony connection). 

An exemplary result of adding a first user is shown in Figure 4A. After adding two 
additional users, and exemplary interface 200 includes three possible users to choose from, as 
shown in Figure 4B. 

Once users have been added to the interface 200, at least one user may be selected 
from the list area 240 as shown in Figure 5A. By then selecting the group-browsing 
invitation button 225, the users selected in the list 240 may be sent a message (optionally 
including text) inviting them to join a group-browsing session. Such an invitation may be 
made using a message dialog 260. In the example, Ikena02 is inviting IkenaOl to a group- 
browsing session. 

Similarly, as shown in Figure 5B, user Ikena02 is being invited by user Ikena03 to 
join in a browsing session. No other users are yet in the group. The user may either join the 
group using button 262 or decline using button 264. The invitation process is shown 
schematically in Figure 5C for a pure client-server model. Instead of passing the "join" 
request through the coordination server 12, user B may instead request the location of user A 
and then pass the "join" request directly to user A, as shown in Figure 5D. In either 
embodiment, once the join request has been accepted, the group browser controller 60 on 
each local machine spawns the rest of the client-side environment for group browsing. As 



shown in Figure 5E, that environment includes a group browser 65 (e.g., Internet Explorer 
5.X). In one embodiment, the environment also includes a proxy 70 that acts as a gatekeeper 
for preventing personal information from being disclosed in a group-browsing session. 
Preferably, at the start of a group-browsing session, access to previously stored cookies by the 
group browser is disabled for the duration of the group-browsing session to avoid having 
personal information (accessible by the cookies) be distributed to others in the group 
browsing session. (Non-shared browsers continue to have access to the permanently stored 
cookies since the URL requests of the non-shared browsers are not passed between users.) 

After the client-side environments have been created, a first page shared is displayed 
by sending messages from the group browser controllers 60 to the group browsers 65. An 
exemplary display environment is shown in Figure 6. That environment includes an interface 
310 generated by a group browser 65, the interface 200 extended with an on-line toolbar 300, 
and a chat interface 320 for sending and receiving messages from other members of the 
group. In one embodiment, the initial page to be displayed is selected by the coordination 
server and communicated to each of the group browser controllers 60. In another 
embodiment, the initial page to be displayed is selected by one of the group browser 
controllers 60 and communicated to the other group browser controllers 60, either directly or 
via coordination controller 12. Communication between the group browser controllers 60 
and the group browsers 65 preferably conforms to the DWebBrowserEvents2 interface and 
the IwebBrowser2 interface. Those interfaces are published by Microsoft Corporation and 
are incorporated herein by reference in their entirety. 
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As shown in Figure 7, the chat interface 320 can be used to send messages from one 
user to another. Preferably, the identify of the sending user prefaces the message displayed in 
the text area 325. 

Once the client-side environments are running, either user may select a navigational 
control (e.g., the back button, the forward button, the home button, or a history list) or enter 
an address in the address box to request a group browser 65 to change displayed pages. As 
shown in Figure 8 A, User A generates selects a new URL to be displayed on the group 
browser 65. This selection sets off two information exchange sequences (labeled 1-4 and 1'- 
8', respectively). In the first information exchange, the URL information (including any 
POST data and cookies) is sent to the group browser controller 60 in the form of a page 
change message (either before or after the page is actually received according to the second 
information exchange). As would be understood by one of ordinary skill in the art, if user A 
is unable to reach the new URL, it may be preferable that the page change message not be 
sent to the group browser controller 60. On the other hand, in an alternate embodiment, the 
page change message is sent even if the user A cannot change to the new URL. 

In order to distinguish between a locally initiated URL request (1) arriving at a proxy 
70A of a user A and a remotely initiated URL request (5') arriving at a proxy 70B of user B, 
in one embodiment, the group browser controller 60A adds information (e.g., a key/value 
pair) to the URL information prior to forwarding the URL information to user B. This 
enables the proxy server 70B to perform cookie management. In an alternate embodiment, 
the additional information can be added by the group browser 60B upon the arrival of the 
URL request at user B's machine. 
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Utilizing the information exchange sequences of Figure 8A, it is possible to move 
from the page of Figure 6 to a new page. Figure 8B illustrates the result of user A selecting 
to go to the Patent Office's main page. 

An important part of the process of Figure 8A is the transmission of the POST data 
and cookies between machine. This enables multiple users to browse in an on-line book 
store, and have the books be added to everyone's cart (because they share a common 
temporary cookie). The sharing of cookies, however, can be dangerous if the cookies are 
used to access sensitive information. Often such sensitive information is further protected by 
utilizing a secure connection (e.g., an https connection) between a browser and a server. 
: Accordingly, in one embodiment of the present invention, attempts to utilize a secure 
connection are tracked in the proxy 70, and such attempts are blocked for the user's sake. In 
one such embodiment, a warning message, as shown in Figure 9, is generated by the proxy 
..." and sent back to the browser for display. In such a case, either (1) the group browser 
controller 60A blocks a page change request message from being sent to the group browser 
■ controller 60B or (2) the message is sent but the proxy 70B prevents user B from accessing 
the page either. 

In an alternate embodiment, attempts to access secure content cause a warning 
message to be sent to the user. That warning identifies the danger of sharing sensitive 
information and allows the user the opportunity to cancel the request for secure information. 
In such an embodiment, cookies stored before the start of a group browser session can also be 
used with the same type of warning. 

In yet another embodiment, attempts to access secure content cause a non-shared 
browser to be spawned on the local machine and future uses of that cookie by other users is 
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prevented via the proxies. Moreover, since a non-shared browser is then used, the 
information is only displayed to a single user. In this way, a series of users can add items to a 
shopping cart together, and then one user can perform the checkout while ensuring that the 
other users do not see the added credit card or personal information. 

In the event that a user selects to leave a session (e.g., instead of sharing sensitive data 
or because a user has selected quit), the present invention gives the user a chance to ensure 
that is what the user really intended. As shown in Figure 10, a dialog box 330 notifies the 
user of the consequences of the action. 

As shown in Figure 1 1 A, other users are notified if a dialog box 340 if the group 
browsing session has been terminated by one of the users. Since the termination is not 
reversible, the user is only provided with an okay button. As a result, in an embodiment that 
utilizes a proxy to maintain cookies, the cookies of the group browsing session must be 
cleaned up. An exemplary routine for performing cleanup is shown in Figure 1 IB. 

It is not always possible or desirable to start a group browsing session just to tell 
another user something. Accordingly, using the mail button 220, a user may send a message 
to another user without selecting the "Send as an invitation to cobrowse" checkbox. In such a 
case, the dialog box 260 is simply used to input a message to be sent to the remote user. As 
shown in Figure 12, the user Ikena02 has selected to send a message to IkenaOl using dialog 
box 260. 

Using the settings button 215, the interface 200 may be configured in various ways. 
Four exemplary tabs are shown in the dialog box 270 in Figure 13. The selected tab is the 
client tab, and the user is enabled to select any of the options illustrated. The user is similarly 
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able to select options displayed in the profile dialog box 280, the chat dialog box 290, and the 
lists dialog box 295 in Figures 14-16, respectively. 

When a user is ready to completely quit the system, rather than just a session, the user 
is preferably warned of the consequence, as shown in Figure 17. 

As described herein, a portion of the responsibility of the proxy 70 is to manage 
cookies between the users of a group. Although a group browsing session preferably starts 
with no cookies, cookies can be added during the group browsing session. According to one 
embodiment of the present invention, the proxy runs trigger routine computer code to manage 
cookies. An exemplary trigger routine computer code and cookie manager computer code are 
attached hereto in Appendix I. This prevents any client's actual identification information 
(i.e., personal information created before the group browsing session) from being disclosed. 
Furthermore, the proxies 70A and 70B are configured to create the same temporary identifier 
for each client when any client logs on to the web site so that the same web page is displayed 
for all the clients in the group. An exemplary log that is created by the co-browsing routine 
which manages the cookies containing an example of temporary identifier is attached hereto 
in Appendix II. 

In a pure-client server implementation, the coordination server 12 is capable of 
tracking all the page transitions and on whose behalf they were made. Thus, the coordination 
server 12 can perform tracking for billing and other purposes. 

In an alternate embodiment, the browser is augmented with a plug-in for specifying a 
new protocol that will be handled by the plug-in. By specifying that the protocol is "ikena://" 
instead of "http://", the plug-in can direct URL requests to itself without the need for a 
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separate proxy. In an embodiment that utilizes protocol substitution, the "ikena://" protocol is 
associated with a well-known port number (e.g., 7165). 

This method also includes masking the identity of each client's computer to prevent 
the web site from retrieving any client's actual identifier by replacing the http protocol 
identifier with a special protocol identifier. Additionally, the group-browsing method of the 
subject invention further includes creating the same temporary identifier for each client when 
any client logs on to the web site so that the same web page is displayed for all the clients in 
the group. 

The group-browsing system of the subject invention also prevents any client, 
identified as another client, from returning to the web site by deleting the temporary identifier 

- at the end of a group-browsing session. Additionally, when other clients in the group are able 
: to access that client's private information, the system generates a warning message. At the 

" end of a group-browsing session, client software is able to detect the end of a group-browsing 
session and, in response, to direct a client's secure browser to transmit the web site URL, 

- allowing the client to return to the previously accessed web site. 

The primary steps associated with the gatekeeper module of the system are shown in 
Fig. 18. In step 662, the gatekeeper launches a software application. In step 664, client A, 
starts a group-browsing session. In step 666, the software application creates an empty 
temporary cookie jar associated with group browsers. In step 668, the software application 
intercepts all cookies and places them into temporary cookie jars. In step 672, the software 
application allows clients to share personalized web pages safely by passing or blocking 
cookies between the users in a co-browsing session at step 670. 



In step 674, the termination of a session may either allow at least one of the users to 
continue to use cookies from the group session (but in another, non-shared browser) or all the 
cookies may be cleaned up. 

Additional messages may also be displayed during group-browsing session. Dialog 
boxes may state, "For your protection, the producer of this site does not allow people to 
browse this site together due to security and privacy concerns" or, if it is for copyright issues, 
the dialog box may state, "The producer of this site does not allow group-browsing for 
copyright protection." 

If there are only two clients in a group-browsing session, when client A exits the 
; group-browsing session, the system interrupts client B's experience by logging him off. 
I Client B can then re-log into the web site. However, if there are more than two clients in a 
group-browsing session, for example three, unless two of the three clients exit the 
group-browsing session, the system will not interrupt the remaining clients' experience. 

The software application of the subject invention consists of two primary components, 
trigger routine computer code and cookie computer code. Exemplary trigger routine 
computer code and cookie manager computer code are attached hereto in Appendix I. 

One purpose of the trigger routine computer code is to activate the cookie manager 
routine computer code when a user joins a group-browsing session. The trigger routine 
computer code accomplishes this task by adjusting the end-user settings to allow the cookie 
manager routine computer code to intercept all web traffic. Once the session has ended, the 
trigger routine computer code removes the cookie manager computer code and returns all 
settings to their previous values. 



The cookie manager computer code protects users' personal cookies while allowing 
them to share personalized web pages and also ensures that those cookies are not improperly 
transferred to other group-browsing clients; therefore, it establishes a secure group-browsing 
environment. The cookie manager computer code accomplishes this by creating a temporary 
cookie jar that houses all cookies created during session. This temporary cookie jar is 
retained in the memory, and is accessible only by the client's application while 
group-browsing. 

Although specific features of the invention are shown in some drawings and not in 
others, this is for convenience only, as each feature may be combined with any or all of the 
other features in accordance with the invention. The words "including," "comprising," 
"having," and "with" as used herein are to be interpreted broadly and comprehensively and 
are not limited to any physical interconnection. Moreover, any embodiments disclosed in the 
subject application are not to be taken as the only possible embodiments. 

Other embodiments will occur to those skilled in the art. Obviously, numerous 
modifications and variations of the present invention are possible in light of the above 
teachings. For example, group-browsing can be performed either client-server or peer to peer 
(without the coordination server 12 or with only intermittent connectivity thereto). It is 
therefore to be understood that, within the scope of the appended claims, the invention may 
be practiced otherwise than as specifically described herein. 



-19- 



